← Database

CVE-2021-41297

HIGH CVSS: 8.8 Published: 2021-09-30 Modified: 2026-06-17

Description

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.

Affected Platforms

Ecoa Ecs Router Controller-EcsEcoa RiskbusterEcoa Riskbuster FirmwareEcoa Ecs Router Controller-Ecs FirmwareEcoa Riskterminator

Weakness Type

CWE-522

References